IBM Findings: Korn Shell Redirection Race Condition Vulnerability

[Michael S Soukup <soukup () US IBM COM>]

-----BEGIN PGP SIGNED MESSAGE-----

Regarding the recently discussed Korn shell redirection race condition
vulnerability and related topics on BUGTRAQ, we at IBM have examined our
version of the Korn Shell used in AIX for this potential problem.

We have determined that our version of the Korn shell is not vulnerable to
this particular exploit.

Kudos to Paul Szabo, Juergen Meier, J.A. Guterriez, and et. al. for their
informative discussions on BUGTRAQ on the topics!

************************************************
Michael Soukup
AIX Security Team Lead
AIX Security and Performance Tools Dept. (UD3A)
IBM Austin

Phone: (512) 838-0595
e-mail: soukup () us ibm com

Personal PGP KeyID: 1024/3C203F04
IBM Security Alert PGP KeyID: 1024/F5620AAF
************************************************

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2

iQCVAwUBOkolRQsPbaL1YgqvAQEVBQP+LbnL4Y97E4T9V+faySoBljJJq8WDB5ur
tg6+QNfQhoDrvrtTuR6aU98PrOQShqkE+wsKDPG/OB91Y5aga5aZqF0VevIVX3M1
uwJeuHwtLAB6dL2rfJM3hcynTqHFeP2Hew6R8Z9lKrTmwvQQdIqtk+R69N1dUTdj
gDbFYj8fIiY=
=5fXR
-----END PGP SIGNATURE-----